Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/gq5Rm5074Rfb8egO30IwnMqVo7w.roa
File: gq5Rm5074Rfb8egO30IwnMqVo7w.roa (raw, json)
Hash identifier: Xy72PvaEXH4enh5DvxkUGpOBTo1jSI07+u8X/XB6ly4=
Subject key identifier: 82:AE:51:9B:9D:3B:E1:17:DB:F1:E8:0E:DF:42:30:9C:CA:95:A3:BC
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 02EAA7B7
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/gq5Rm5074Rfb8egO30IwnMqVo7w.roa
Signing time: Sat 01 Jan 2022 05:54:31 +0000
ROA not before: Sat 01 Jan 2022 05:54:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16019
IP address blocks: 62.245.64.0/18 maxlen: 18
46.167.224.0/19 maxlen: 19
62.245.96.0/19 maxlen: 19
46.167.192.0/19 maxlen: 19
46.167.192.0/18 maxlen: 18
62.245.64.0/19 maxlen: 19
84.242.96.0/19 maxlen: 19
109.107.192.0/19 maxlen: 19
93.90.160.0/20 maxlen: 20
84.242.64.0/19 maxlen: 19
31.30.0.0/16 maxlen: 16
84.242.64.0/18 maxlen: 18
213.220.224.0/19 maxlen: 19
88.146.192.0/18 maxlen: 18
89.103.0.0/16 maxlen: 16
84.42.128.0/17 maxlen: 17
84.42.128.0/18 maxlen: 18
141.170.128.0/18 maxlen: 18
141.170.128.0/19 maxlen: 19
213.220.192.0/19 maxlen: 19
213.220.192.0/18 maxlen: 18
93.99.128.0/17 maxlen: 17
86.49.0.0/17 maxlen: 17
89.177.0.0/16 maxlen: 16
94.113.0.0/16 maxlen: 16
86.49.0.0/16 maxlen: 16
86.49.128.0/17 maxlen: 17
84.42.192.0/18 maxlen: 18
141.170.160.0/19 maxlen: 19
80.95.96.0/19 maxlen: 19
31.169.128.0/17 maxlen: 17
31.169.128.0/18 maxlen: 18
188.95.120.0/21 maxlen: 21
78.45.0.0/16 maxlen: 16
81.27.200.0/21 maxlen: 21
77.48.0.0/17 maxlen: 17
89.176.0.0/16 maxlen: 16
94.112.0.0/16 maxlen: 16
77.48.0.0/16 maxlen: 16
89.176.0.0/15 maxlen: 15
94.112.0.0/15 maxlen: 15
78.102.0.0/17 maxlen: 17
78.102.0.0/16 maxlen: 16
89.102.0.0/16 maxlen: 16
89.102.0.0/15 maxlen: 15
62.240.160.0/20 maxlen: 20
62.240.160.0/19 maxlen: 19
62.240.176.0/20 maxlen: 20
88.146.128.0/18 maxlen: 18
88.146.128.0/17 maxlen: 17
93.99.0.0/17 maxlen: 17
31.169.192.0/18 maxlen: 18
77.48.128.0/17 maxlen: 17
93.99.0.0/16 maxlen: 16
78.102.128.0/17 maxlen: 17
78.44.0.0/16 maxlen: 16
178.77.192.0/19 maxlen: 19
78.44.0.0/15 maxlen: 15
46.135.0.0/16 maxlen: 16
178.77.192.0/18 maxlen: 18
178.77.224.0/19 maxlen: 19
213.192.0.0/18 maxlen: 18
213.192.0.0/19 maxlen: 19
213.192.32.0/19 maxlen: 19
217.77.160.0/20 maxlen: 20
62.24.64.0/19 maxlen: 19
62.24.64.0/20 maxlen: 20
62.24.80.0/20 maxlen: 20
82.142.64.0/18 maxlen: 18
81.27.192.0/20 maxlen: 20
81.27.192.0/21 maxlen: 21
2a02:8300::/28 maxlen: 28
2a00:11b0::/29 maxlen: 29
2a02:8300::/29 maxlen: 29
2a02:8308::/29 maxlen: 29
2a01:5e0::/33 maxlen: 33
2a01:5e0:8000::/33 maxlen: 33
2a01:5e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48932791 (0x2eaa7b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: Jan 1 05:54:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82ae519b9d3be117dbf1e80edf42309cca95a3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ff:fb:e5:ad:f4:44:5c:49:dd:21:a3:e6:b4:
1f:b0:9f:d0:a6:45:97:2f:c7:70:e0:f4:9d:05:cb:
a9:10:c7:62:98:ab:c6:e9:a3:b9:76:07:b3:2c:a4:
cf:24:7e:81:c6:f9:9b:44:55:1c:02:12:83:c8:e4:
46:a5:45:b9:39:e7:ed:83:83:e9:27:5b:c8:45:fd:
38:b4:85:17:ce:2e:15:42:b8:9f:b7:8b:e5:e2:97:
0c:8f:2b:f4:35:f5:d8:f1:e6:3f:59:50:0b:ae:15:
c1:94:9b:08:ff:59:b1:4c:3a:04:7b:0f:11:9e:4d:
c7:39:69:d9:ed:5a:03:13:9c:12:0a:e3:6e:94:d3:
94:b2:be:26:ce:87:d8:54:26:45:bc:06:05:53:8c:
85:2f:5d:ed:bc:e5:e4:68:9c:93:59:7b:52:0d:13:
11:21:0a:b5:5d:ec:a0:94:e6:98:47:de:2b:e3:fd:
dc:95:8c:f8:e4:fb:d6:14:1f:cb:e1:c4:c4:a6:56:
d1:f7:a3:8d:64:c8:3f:1d:b7:41:76:79:7f:5a:df:
2e:b7:d6:79:e5:3b:d7:e7:12:65:3f:71:40:9a:52:
bc:be:66:fe:1c:00:72:b2:58:08:02:1b:10:28:82:
73:06:96:db:49:49:ec:e3:42:fa:d5:3d:f0:a8:67:
ee:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AE:51:9B:9D:3B:E1:17:DB:F1:E8:0E:DF:42:30:9C:CA:95:A3:BC
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/gq5Rm5074Rfb8egO30IwnMqVo7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.30.0.0/16
31.169.128.0/17
46.135.0.0/16
46.167.192.0/18
62.24.64.0/19
62.240.160.0/19
62.245.64.0/18
77.48.0.0/16
78.44.0.0/15
78.102.0.0/16
80.95.96.0/19
81.27.192.0/20
82.142.64.0/18
84.42.128.0/17
84.242.64.0/18
86.49.0.0/16
88.146.128.0/17
89.102.0.0/15
89.176.0.0/15
93.90.160.0/20
93.99.0.0/16
94.112.0.0/15
109.107.192.0/19
141.170.128.0/18
178.77.192.0/18
188.95.120.0/21
213.192.0.0/18
213.220.192.0/18
217.77.160.0/20
IPv6:
2a00:11b0::/29
2a01:5e0::/32
2a02:8300::/28
Signature Algorithm: sha256WithRSAEncryption
1c:b2:54:49:87:09:85:20:70:93:34:46:38:1d:1c:7b:24:d1:
96:6e:10:c9:17:c2:9d:d1:9a:26:3a:a9:ff:2c:74:87:d0:7b:
4e:b4:3b:ef:6b:26:33:42:20:96:e2:39:81:ad:b7:07:db:59:
fe:9e:e5:f9:d1:7d:6d:41:9b:b5:80:55:ac:90:14:1f:9a:3f:
20:bf:dd:16:10:79:65:5a:b2:4a:38:0b:ec:50:e1:03:a2:87:
fc:b9:f7:44:66:5d:41:07:ed:b5:d5:cd:42:4b:62:fa:72:7a:
ae:74:be:29:5b:03:8e:86:8e:e5:88:da:c7:c6:7e:6b:1f:17:
6e:82:57:eb:e2:91:ba:5d:6e:c3:fe:bf:97:5a:72:12:61:ca:
d3:b0:99:79:86:ad:c9:80:37:32:35:5b:49:46:2a:9c:10:5b:
e6:5a:28:77:0d:5a:4d:1d:cc:06:38:b2:5d:b7:4e:5e:42:8e:
43:9e:80:99:ba:7b:fd:84:db:98:e2:bc:e0:45:c3:9f:1e:69:
24:5c:b4:d2:4b:57:7c:01:06:ee:f2:55:45:48:81:8f:e4:4a:
9f:cc:80:23:fd:8f:fb:25:84:d9:6c:27:7b:ec:73:ae:e9:e8:
b6:59:64:65:10:30:1c:fa:ba:7d:42:05:b5:73:4a:7c:06:8b:
f5:f9:70:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:36 2025 by rpki-client